Schoolsbroadband - SSL Inspection

[andy_b]

Don't know if I am loosing my mind, but we have just noticed that our SBB connection provides access to a surprising number of websites without the browser complaining about certificates - this is without their SSL inspection certificate installed.

 

Which suggests to me we are not getting a proper SSL inspected connection.  It is hard to say if this is new, because typically we don't browse without the certificate installed.  I know a few sites (most microsoft) used to bypass SSL inspection, but the current testing suggests a lot of sites bypass inspection. 

 

e.g:

 

cert warning - google.com. youtube.com, en.wikipedia.org

 

No cert warning - gbnews.com, aliexpress.com, aljazeera.com, bbc.co.uk - the list goes on

 

SSB block page - 888.com (etc)

 

We've checked the actual certificates presented by the browser. GB News presents a certificate issued by GlobalSign nv-sa both with and without the SBB certificate installed. Google, by contrast, produces a certificate error without the SBB certificate and presents an SBB certificate when it is installed.

 

Is this the same for others?  Because it does seem a number of sites are getting bypassed.